CVE-2026-7704 in Pixera Two Media Server
Summary
by MITRE • 05/03/2026
A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 25.2 R3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 05/25/2026
This vulnerability affects the AV Stumpfl Pixera Two Media Server version 25.1 R2 and earlier, specifically targeting the Service Port 1338 component. The flaw manifests as a path traversal vulnerability that allows unauthorized manipulation of the underlying system files through a previously unknown function within the service port. Path traversal vulnerabilities represent a critical class of security flaws that enable attackers to access files and directories outside the intended scope of the application. The vulnerability exists due to inadequate input validation and improper handling of file paths within the media server's service implementation, creating an attack surface that allows remote exploitation through the designated port.
The technical exploitation of this vulnerability occurs when an attacker sends maliciously crafted requests to port 1338, leveraging the unknown function to manipulate file path resolution mechanisms. This type of vulnerability falls under CWE-22 Path Traversal and aligns with ATT&CK technique T1059.007 Command and Scripting Interpreter for Windows Command Shell, as it provides a pathway for arbitrary file access and potential command execution. The disclosed exploit demonstrates that attackers can navigate through the file system hierarchy to access sensitive data, modify system files, or potentially execute malicious code on the affected server. The vulnerability's classification as a path traversal issue indicates that the application fails to properly sanitize user-supplied input before using it in file system operations.
The operational impact of this vulnerability extends beyond simple data access, as it represents a significant compromise to the media server's security posture. Attackers who successfully exploit this vulnerability could gain access to configuration files, media assets, system logs, and potentially sensitive user data stored on the server. The media server environment typically handles critical visual content and operational data for broadcast and production environments, making the compromise of such systems particularly concerning. The vulnerability's exposure through port 1338 creates an attack vector that could be leveraged by threat actors without requiring physical access to the system or advanced credentials. This makes the vulnerability particularly dangerous in production environments where the server may be exposed to untrusted networks.
Organizations using affected AV Stumpfl Pixera Two Media Server versions should immediately implement the recommended mitigation by upgrading to version 25.2 R3, which contains the necessary patches to address the path traversal vulnerability. The upgrade process should be carefully planned to minimize service disruption while ensuring complete remediation of the security issue. Additionally, network segmentation should be implemented to restrict access to port 1338, limiting the attack surface and reducing the likelihood of exploitation. Security monitoring should be enhanced to detect anomalous traffic patterns that might indicate exploitation attempts, and access controls should be reviewed to ensure only authorized personnel can interact with the service port. The vulnerability's disclosure status necessitates immediate action to prevent potential exploitation by malicious actors who may be actively targeting systems with this specific flaw.